标签：#rce

TLDR; I got tired of babysitting N terminal tabs of five different coding-agent CLIs. So I built agentproto — one daemon that drives Claude Code, Codex, Hermes, opencode, and Mastra through the same lifecycle, and actually supervises them. Why I built a daemon to drive every AI coding agent from one interface I have a confession: at any given moment I have Claude Code, Codex, and Hermes running in parallel terminal tabs, and I cannot remember which flag spawns which, which one eats --prompt , which one needs --cwd vs cd , and which one will hang forever if I close the laptop lid. simonw described the feeling on Hacker News recently — "Today I have Claude Code and Codex CLI and Codex Web running, often in parallel" — and called it a real jump in cognitive load compared to a year ago. aantix asked, also on HN: "how does everyone visually organize the multiple terminal tabs open for these numerous agents in various states?" I didn't have a good answer. So I built one. It's called agentproto . It is one daemon and one CLI that drives any coding-agent CLI — Claude Code, Codex, Hermes, opencode, Mastra, and a few more — through the same start / prompt / monitor / kill lifecycle, so you stop memorizing five different CLIs. On top of that lifecycle it adds the supervision layer people keep hand-rolling by hand: durable policy gates, nested orchestration, and multiplexed fan-in monitoring. MIT, no paid tier, the daemon itself is an MCP server. This is the story of why it exists. The hand-rolled watchdog The sharpest signal while I was building this came from other people independently re-inventing the same primitives in tmux scripts. On r/ClaudeAI, Confident_Chest5567 posted a writeup of orchestrating agents via tmux panes with a watchdog that resets dead sessions — "a swarm of agents that can keep themselves alive indefinitely." In the same thread, IssueConnect7471 (18 upvotes) described wiring a Redis pub/sub heartbeat plus dead-letter respawn between tmux panes, and arriv

TL;DR Three unrelated repos, one recurring theme: derive from a single source of truth instead of duplicating it. Shipped a registry-driven sidebar section switcher (public), converged a multi-system password flow, and pushed on a customer-data identity engine. Details on the first two live in their own posts today. 1. Registry-driven sidebar switcher (public) Added a section switcher to the kickoff starter kit. The sidebar, the switcher, and breadcrumbs all read the same config/menu.php list, and the active section is picked by longest URL-prefix match — so a detail page like /admin/roles/42/edit keeps its parent selected. Full write-up in the focused post. 2. One canonical password flow Converged two apps that each rolled their own password-change/reset logic onto a single shared engine, with a fixed order (directory → external DB → local app) and no config-toggle to skip backends. A password that syncs to some systems is worse than one that fails outright, so partial success is now impossible by construction. Also fixed a subtle status bug — an unreachable backend reports skipped (a runtime fact), not disabled (a config state that no longer exists) — and added an audit log so "did it sync?" is a query, not a guess. Separate post today goes deeper. 3. Identity resolution engine (customer data work) Steady progress on a CDP-style identity layer: an idempotent, header-versioned ingest endpoint that queues incoming records, then a resolution engine that can resolve, merge, unmerge, and quarantine profiles. Two things I care about here: PII handling: sensitive identifiers are encrypted at rest with a blind index for lookups, and masked in audit trails — you can search on a value without storing it in the clear. Right-to-erasure: an erasure cascade plus an erasure log, so a deletion request actually propagates and leaves a defensible record that it did. ingest -> queue -> resolve -> profile | +-> merge / unmerge / quarantine No code from this one here — it's teaching t

GitHub热门项目 | A beautiful, private, local-first personal finance tracker. Investments, net worth, spending, and simulations. | Stars: 8,043 | 201 stars today | 语言: Rust

GitHub热门项目 | A terminal for a more modern age | Stars: 73,127 | 93 stars today | 语言: TypeScript

GitHub热门项目 | Traycer: Nerve Center for Agentic Coding | Stars: 409 | 71 stars today | 语言: TypeScript

GitHub热门项目 | Accelerating new GitHub Actions workflows | Stars: 11,793 | 4 stars today | 语言: TypeScript

GitHub热门项目 | An advanced guide which might benefit you a lot 🎉 . 人生进阶指南 离谱的人生 离谱的英语学习指南/英语学习教程/英语学习/学英语 | Stars: 55,583 | 148 stars today | 语言: JavaScript

GitHub热门项目 | Open-source intelligence for the global theater. Track everything from the corporate/private jets of the wealthy, and spy satellites, to seismic events in one unified interface. Hook an AI agent up to have it parse through data and find previously unseen correlations. The knowledge is available to all but rarely aggregated in the open, until now. | Stars: 9,650 | 30 stars today | 语言: Python

GitHub热门项目 | An evolving how-to guide for securing a Linux server. | Stars: 28,853 | 399 stars today | 语言:

GitHub热门项目 | Fully autonomous AI Agents system capable of performing complex penetration testing tasks | Stars: 19,091 | 454 stars today | 语言: Go

GitHub热门项目 | A collection of notebooks/recipes showcasing some fun and effective ways of using Claude. | Stars: 46,869 | 194 stars today | 语言: Jupyter Notebook

GitHub热门项目 | A collection of DESIGN.md files analysis by popular brand design systems. Drop one into your project and let coding agents generate a matching UI. | Stars: 99,081 | 1,569 stars today | 语言:

GitHub热门项目 | Source code for Unturned, a free open-world zombie survival sandbox game. | Stars: 1,776 | 541 stars today | 语言: C#

OpenSuperWhisper 评测：macOS 上最被低估的开源语音转文字工具？ 30秒结论 ：OpenSuperWhisper 是一个基于 OpenAI Whisper 模型的 macOS 原生听写（dictation）应用。如果你受够了 macOS 自带听写的间歇性抽风，或者不想每月交钱给 Otter.ai，这个免费开源项目值得一试。 但别期待开箱即用 ——你需要自己配置模型、处理依赖，而且目前只支持 macOS。 适合人群：macOS 重度用户、需要离线语音转文字、对隐私敏感、愿意折腾配置的开发者。 不适合：Windows/Linux 用户、不想碰终端的人、需要实时流式转写（目前不支持）。 核心功能：代码实操 1. 安装部署 # 克隆仓库 git clone https://github.com/Starmel/OpenSuperWhisper.git cd OpenSuperWhisper # 安装依赖（需要 Python 3.10+） pip install -r requirements.txt # 直接运行 python app.py 坑点1 ： requirements.txt 里没写版本号，我踩了 numpy 版本冲突的坑。建议手动指定： pip install numpy == 1.26.0 torch == 2.1.0 whisper == 20231117 坑点2 ：macOS 14 Sonoma 上需要手动授权麦克风权限。第一次运行会 crash，因为没处理 PermissionError 。workaround：在 System Settings > Privacy & Security > Microphone 里手动勾上终端或 Python 的权限。 2. 基本使用 启动后会在菜单栏出现一个小图标（类似 macOS 原生听写）。快捷键是 Option + Space （可自定义）。 核心逻辑：按下快捷键 → 录音 → 松开 → 调用 Whisper 转写 → 结果写入当前光标位置。 代码层面 ，核心函数在 whisper_handler.py 里： # 简化版核心逻辑 import whisper import sounddevice as sd import numpy as np class WhisperHandler : def __init__ ( self , model_size = " base " ): self . model = whisper . load_model ( model_size ) self . sample_rate = 16000 def transcribe_from_mic ( self , duration = 5 ): # 录音 recording = sd . rec ( int ( duration * self . sample_rate ), samplerate = self . sample_rate , channels = 1 ) sd . wait () audio = recording . flatten (). astype ( np . float32 ) # 转写 result = self . model . transcribe ( audio , language = " zh " ) return result [ " text " ] 实测 ：默认 model_size="base" 时，中文准确率约 85%。换成 "large-v3" 能到 92%，但首次加载要 2GB 内存，转写一条 10 秒语音需要 8-12 秒（M1 Pro 芯片）。 3. 自定义快捷键 config.yaml 里可以改： hotkey : modifier : " option" key : " space" model : size : " base" # 可选: tiny, base, small, medium, large-v3 device : " cpu" # 或 "mps" (Apple Silicon) output : paste_delay : 0.3 # 转写后粘贴延迟，防止焦点丢失 注意 ： device: "mps" 在 macOS 14.2 上会报 MPS backend not available 。需要安装 PyTorch 的 MPS 版本： pip install torch torchvision torchaudio --index-url https://download.pytorch.org/whl/nightly/cpu 性能测试 测试环境：MacBook Pro M1 Pro (

OpenAI found two unrelated bugs masquerading as one in ChatGPT's data infrastructure. Silent hardware corruption on one Azure host and an 18-year-old race condition in GNU libunwind's setcontext function with a one-instruction vulnerability window. The breakthrough came from switching to population-level crash analysis rather than examining individual core dumps. By Steef-Jan Wiggers

tags: hardware, iot, opensource, electronics As software developers, many of us reach a point where writing code inside a virtual environment isn't quite enough—we want to manipulate the physical world. Whether it's blinking an LED via an ESP32, visualizing audio frequencies on a desk display, or building custom bench tools, hardware hacking is easily one of the most rewarding rabbit holes to fall down. At NextPCB , we’ve spent the past few years supporting the open-source hardware community by sponsoring independent creators, makers, and embedded engineers to help turn their digital schematics into real, physical circuit boards. If you’re looking for inspiration for your next weekend project, here are four curated roundups of real-world projects featuring open-source files, schematics, and design breakdowns. 1. Retro Tech & Nostalgic Geek Culture Builds 🎮 There’s something uniquely satisfying about recreating classic tech using modern hardware components. From custom hand-held arcade consoles to retro synth modules and glowing mechanical displays, retro builds combine aesthetic nostalgia with serious embedded engineering. These projects aren't just for show—they showcase clever power management, compact multi-layer PCB routing, and custom display interfaces. 👉 Check out the project breakdowns & schematics: 8 Retro Geek Culture PCB Projects: Open-Source Gerbers & Schematics 2. Smart Audio & Interactive Visual Displays 🎵 Audio reactive electronics bridge the gap between digital signal processing (DSP) and hardware UI/UX. Think custom spectrum analyzers, RGB LED matrix drivers, and tactile smart knobs that update in real-time. Building custom audio hardware requires paying extra attention to noise isolation, clean power delivery, and signal integrity—making these projects fantastic learning material for intermediate hardware devs. 👉 Explore the audio & display designs: Smart Audio & Interactive Display PCBs: Open-Source Design Guide 3. DIY Power & Precision Lab Equipm

The Kubernetes community has introduced a framework for integrating AI into open-source maintainership, emphasising human accountability in code quality and oversight. AI tools may streamline workflows, but ultimate responsibility lies with human maintainers. The framework requires disclosure of AI usage in contributions and prohibits AI-generated commit messages. By Olimpiu Pop

You built your WooCommerce store. You've got products, a checkout flow, and customers who want to pay in crypto. The question is: which payment gateway do you actually trust with your money? Most crypto payment plugins for WooCommerce work the same way: they collect your customer's payment, hold it in their own wallet, and send you a payout — minus fees, minus a wait, minus any guarantee they won't freeze your account if something looks "suspicious." That's not crypto. That's a bank with extra steps. This guide covers how to accept crypto payments on WooCommerce the non-custodial way — funds go directly from your customer's wallet to yours, on-chain, with no middleman holding anything. What "non-custodial" actually means for your store When a customer pays through a custodial processor, the money lands in the processor's wallet first. You're trusting them to forward it. If they freeze your account, dispute a transaction, or go under, your money is stuck. Non-custodial means the smart contract routes the payment directly to your wallet address. QBitFlow never holds your funds — not for a second. Every payment has an on-chain transaction hash you can verify on Etherscan, Solscan, or BaseScan. There's no one to call to "release" your money because no one ever had it. For a WooCommerce merchant, this matters for three reasons: No chargebacks. Crypto transactions are final. A customer can't call their bank and reverse a payment you already received. No holds. There's no processor deciding whether your business is "high-risk" this week. No conversion. You receive exactly what the customer paid — USDC stays USDC, ETH stays ETH. No auto-swap, no slippage, no surprise exchange rate. What you need before you start A WooCommerce store (WordPress + WooCommerce plugin installed) A crypto wallet — MetaMask, Coinbase Wallet, or any wallet that works with Reown/AppKit (browser extension or mobile QR scan) About 10 minutes That's it. No business registration. No KYC. No waiting for

用 FROST 五维元模型构建可治理的多 Agent 系统：从零到一的代码教程 作者 ：FROST Team 日期 ：2026-07-09 主题 ：代码教程 | 周四轮换 项目 ：FROST + FROST-SOP 前言 2026 年，Agent 框架百花齐放——LangChain、CrewAI、AutoGen 各有各的好。但它们都有一个共同的盲区： 治理能力 。 当你的 Agent 系统从 1 个变成 10 个，从跑 Demo 变成跑生产，你会发现： 谁有权做什么？没有答案 这个决策是谁做的？无法追溯 Agent 越权了怎么办？事后才能发现 FROST（Fractal Runtime of Orchestrated Skills & Tasks）的 五维元模型 就是为解决这些问题而设计的。 今天这篇教程，我们用代码从零构建一个完整的多 Agent 治理系统。 FROST （教学框架）提供理论基础 → Gitee 仓库 FROST-SOP （工程平台）提供工程落地 → Gitee 仓库 一、五维元模型是什么？ FROST V4.0 引入了五个核心维度，每个维度解决 Agent 治理的一个关键问题： 维度 模块 解决的问题 类比 武器 Armory Agent 有哪些能力？ 武器库清单 任务 TaskRegistry 工作如何编排？ 作战计划 事件 EventCatalog 发生了什么？ 战场态势 平台 PlatformRegistry 外部资源在哪？ 后勤补给 规则 RuleRegistry 什么能做/不能做？ 交战规则 五个维度 各自独立又相互咬合 ——就像五角星的五个角，缺一个就不完整。 二、环境搭建 # 克隆 FROST 教学框架 git clone https://gitee.com/liao_liang_7514/frost.git cd frost # 安装依赖 pip install -r requirements.txt # 验证环境 python -m pytest test_core.py -v FROST 的设计哲学是 零外部依赖 ——核心只需要 Python 标准库。五维元模型的模块也遵循这个原则。 三、维度一：Armory（武器注册表） Armory 管理 Agent 所有能力的元数据。不是简单的方法注册，而是带元信息的 能力目录 。 from core.armory import Armory , SkillMetadata # 创建武器库 armory = Armory () # 注册一个技能（带完整元数据） armory . register ( SkillMetadata ( name = " summarize_text " , category = " nlp " , description = " 将长文本压缩为摘要 " , input_schema = { " text " : " string " , " max_length " : " int " }, output_schema = { " summary " : " string " }, cost_estimate = 0.002 , # 每次调用预估成本 latency_ms = 500 , # 预估延迟 tags = [ " summarization " , " compression " ] ) ) armory . register ( SkillMetadata ( name = " search_web " , category = " retrieval " , description = " 联网搜索获取最新信息 " , input_schema = { " query " : " string " , " top_k " : " int " }, output_schema = { " results " : " list[dict] " }, cost_estimate = 0.01 , latency_ms = 2000 , tags = [ " search " , " real-time " ] ) ) # 发现可用技能 nlp_skills = armory . discover ( category = " nlp " ) print ( f " NLP 技能: { [ s . name for s in nlp_skills ] } " ) # 输出: NLP 技能: ['summarize_text'] # 按标签发现 search_skills = armory . discover ( tags = [ " real-time " ]) print ( f " 实时技能: { [ s

AWS just announced free Sandbox environments which lets any AWS Builder Center user to provision...